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04097 (LC 0133 PUS) 

METHOD AND SYSTEM FOR RE-LEARNING A KEY 

TECHNICAL FIELD 
[0001] The present invention relates generally to key-actuated security 
systems, and more particularly to a method and system for re-learning a 
previously programmed key, 

BACKGROUND OF THE INVENTION 
[0002] Passive anti-theft systems ( U PAT systems") for vehicles ai* well 
known. Typical PAT systems prevent the engine from being started unless at 
least two general conditions are satisfied. First, the driver must utilize a key 
having a structure properly configured for turning the cylinder lock of the 
ignition. Second, the key must also have an identification ("ID"), which 
matches an ID stored within an electronic control module ("ECM") of the PAT 
system. In this way, the typical PAT system provides additional security to 
conventional lock-and-key ignition devices. 

[0003 1 The ECM normally learns a key by writing a unique secret code 
to both the ECM and the key. As is known, this unique secret code is utilized 
with an encryption algorithm for allowing the ECM and the key to communicate 
with each other for the purpose of allowing the ECM to authenticate the key. It 
is also understood that once a typical key is written to, the key is permanently 
locked and cannot be overwritten. 

[0004] A drawback of existing ECMs is that they usually are incapable 
of re-learning a previously programmed key. Specifically, it is understood that 
on occasion the key's ID, the unique secret code associated with that key, or any 
combination thereof may have been erased or otherwise disabled in the ECM's 
memory. For that reason, the ECM cannot recognize the key or communicate 
with the key for authentication purposes. Moreover, since the key cannot be re- 
written or re-programmed, the key may be wasted thereby requiring a new 
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unprogrammcd key to be purchased and learned by the ECM. Such a result can 
be somewhat expensive and rime-consuming. 

[0005] Therefore, a need exists for a method and system for re-learning 
a previously programmed key for allowing the continued use of that key. 

SUMMARY OF THE INVENTION 
[0006] The present invention provides a method and system for re- 
learning a previously programmed, authenticated key. In one embodiment, the 
system includes an electronic control module (ECM) and a key for use with the 
electronic module. The key has an identification code (key ID) stored therein, 
which is transmitted to the ECM. The ECM includes a memory, which can 
store one or more active IDs and one or more disabled IDs. The method begins 
when the ECM fails to match a key ID with all the active or disabled IDs, which 
are stored within the ECM, Thereafter, the ECM sends a signal to the 
previously programmed key by encryption with a default secret code. If the key 
does not understand or respond to this signal, then the ECM sends a signal to 
the previously programmed key by encryption with one of a scries of unique 
secret codes stored within the ECM, The previously programmed key receives 
this signal and then transmits an encrypted valid response signal to the ECM. 
The ECM extracts a key password from the encrypted valid response signal and 
compares the key password to a module password stored within the ECM. 
Thereafter, the ECM determines that the passwords are identical and then the 
ECM stores the key identification code. 

[0007] One advantage of the present invention is that a security system 
is provided that can utilize previously programmed keys. 
[0008] Another advantage of the present invention is that a security 
system is provided that prevents an individual from having to purchase a new 
unprogrammed key when the ECM does not recognize the previously 
programmed key. 

[0009] Still another advantage of the present invention is that a security 
system is provided that includes substantial authentication protocol, which 
prevents the system from learning unauthorized, previously programmed keys. 
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[0010] Other advantages of the present invention will become apparent 
when viewed in light of the detailed description of the invention when taken in 
conjunction with the attached drawings and appended claims, 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0011] For a more complete understanding of this invention, reference 
should now be made to the embodiments illustrated in greater detail in the 
accompanying drawings and described below by way of examples of the 
invention: 

[0012] FIGURE 1 is a schematic diagram of a security system for re- 
learning an authorized, previously programmed key, according to one 
embodiment of the invention; 

[0013] FIGURE 2 is a flowchart depicting a method for programming 
the authorized, previously programmed key into the electronic control module, 
as shown in Figure 1 , according to one embodiment of the invention; 
[0014] FIGURE 3 is a flowchart depicting a method for programming 
the authorized, previously programmed key into the electronic control module, 
as shown in Figure 1 . according to another embodiment of the invention; 
[0015] FIGURE 4 is a flowchart depicting the method as shown in 
Figure 3, including additional authentication protocol, according to yet another 
embodiment of the invention; and 

[0016] FIGURE 5 is a flowchart depicting a method for programming 
the authorized, previously programmed key into the electronic control module, 
as shown in Figure 1 , according to still another embodiment of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 
10017 ] In the following figures, the same reference numerals are used to 
identify the same components in the various views. The present invention is 
particularly suited for a security system integrated within a vehicle. However, it 
is understood that the present invention may be suited for various other security 
systems that are utilized in various applications other than a vehicle. 
[0018] Referring to Figure 1, there is shown a schematic diagram of a 
security system 10 integrated within a vehicle 12, according to one embodiment 
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of the present invention. This security system 10 is an engine immobilization 
system or a passive anti-theft system (PAT system). As is known, a PAT 
system is intended to prevent a person from utilizing an unauthorized key or 
other unauthorized tool for starting the engine 14 of the vehicle 12, For 
example, the security system 10 can be coupled to a starter motor 16 of the 
vehicle 12 and disable the starter motor 16 until an authorized key is inserted 
into the ignition 18. Alternatively, the security system 10 can be coupled to a 
powertrain control module (PCM) 20 and disable that PCM 20 until the 
authorized key is used. However, it is understood that the security system 10 
can be coupled to a variety of other devices within the vehicle 12 so as to 
immobilize or otherwise protect the vehicle 12. 

[0019] The security system 10 includes a primary electronic control 
module (ECM) 22 that is integrated within the vehicle 12 and a key 24 for 
actuating the ECM 22. It is understood that this key 24 was previously 
programmed for use with an ECM, which may or may not be the specific ECM 
22 of this security system 10. The key 24 has electronic circuitry disposed 
within its body for storing a key ID, a unique secret code, and a key password. 
As detailed in the descriptions for Figures 2-5, the key ID, the unique secret 
code, and the key password are utilized for authenticating the key 24. 
[0020] The ECM 22 includes an antenna 26, a memory 28, and a 
microprocessor 30 that is coupled to both the antenna 26 and the memory 28. 
This memory 28 includes one or more key IDs, an encryption algorithm, a 
default secret code, one or more unique secret codes, and one or more module 
passwords stored therein. The microprocessor 30 retrieves this data from the 
memory 28 and utilizes the data for executing control logic and authenticating 
the previously programmed key 24 (as detailed in the descriptions for Figures 2- 
5), As is known, the microprocessor 30 communicates with the key 24 by way 
of the antenna 26. However, it is understood that the microprocessor 30 may 
communicate with the key in a variety of other ways. 

1 0021] In another embodiment, the security system 10 further includes a 
supplemental ECM 32 coupled to the primary ECM 22. This supplemental 
ECM 32 can be utilized as a backup for storing the key IDs, the unique secret 
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codes, the module passwords, or any combination thereof. In this way, the 
supplemental ECM 32 can transmit this data to the primary ECM 22 and allow 
the primary ECM 22 to utilize this data for authenticating the key 24 according 
to the control logic detailed in the descriptions for Figures 2-5. The 
supplemental ECM 32 is integrated within the vehicle 12. However, it will be 
appreciated the system 10 can instead include an external database instead of 
the supplemental ECM 32. For example, this external database can be a device 
that is separate from the vehicle, e.g. a module that is utilized by service 
technicians during maintenance checks. 

[ 0022 ] Referring now to Figure % there is shown a flowchart illustrating 
a method for programming the previously programmed key 24 into the ECM 22 
shown in Figure 1, according to one embodiment of the invention. The method 
begins in step 100 and then immediately proceeds to step 102, 
[00231 In step 102, the ECM 22 receives and reads the key ID. This 
step is accomplished by transmitting a signal, which contains the key ID, from 
the key 24 to the ECM's antenna 26. Furthermore, the key ID is then 
transmitted from the ECM's antenna 26 to the ECM's microprocessor 30. , The 
sequence then proceeds to step 104. 

[0024] In step 104, the microprocessor 30 retrieves all the active IDs 
from the ECM's memory 28, compares those IDs to the key ID, and then 
determines if the key ID fails to match any of the active key IDs. If this 
condition is met, then the sequence proceeds to step 106, However, if the 
condition is not met, then the sequence terminates. 

[0025] In step 106, the microprocessor 30 retrieves one or more disabled 
IDs from the ECM's memory 28 and compares those disabled IDs to the key 
ID. One skilled in the art will understand that the ED of the key 24 can become 
disabled within the ECM 22 when the key 24 is invalidated. Then the sequence 
proceeds to step 108. 

[0026] In step 108, the microprocessor 30 determines if the key ID 
matches any of the disabled IDs from the ECM's memory 28. If this condition 
is met, then the sequence proceeds to step 1 10. 
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[0027 J In step 1 10, the microprocessor 30 determines that the key 24 has 
been authenticated and restores the disabled ID, which matches the key ID, to 
an active status. Also, it understood that the microprocessor 30 can store a key 
password of the key 24, which was transmitted with the key ED. Immediately 
thereafter, the sequence terminates. 

[0028] However, if in step 108, the microprocessor 30 determines that 
the key ID fails to match any of die disabled IDs, then the microprocessor 30 
determines that the key 24 is not currently authorized and that the key 24 was 
not previously authorized for use with the ECM 22 of this system 10. As a 
result, the sequence immediately terminates. 

[0029] Referring now to Figure 3, there is shown a flowchart depicting a 
method for programming the previously programmed key 24 into the ECM 22 
shown in Figure 1, according to another embodiment of the invention. The 
method commences in step 200 and then immediately proceeds to step 202. 
[0030] In step 202, the ECM 22 receives and reads the key ID, 
Specifically, a signal, which contains the key ID, is transmitted from the key 24 
to the ECM's antenna 26. Thereafter, the key ID is then transmitted from the 
ECMTs antenna 26 to the ECM's microprocessor 30. The sequence then 
proceeds to step 204. 

[0031] In step 204, the microprocessor 30 retrieves all the active IDs 
from the ECM's memory 28, compares those IDs to the key ID, and determines 
if the key ID fails to match any of the active key IDs. If this condition is met, 
then the sequence proceeds to step 206. However, if this condition is not met, 
then the sequence terminates. 

[0032] In step 206, die microprocessor 30 utilizes an encryption 
algorithm with a default secret code for encrypting a signal having 
predetermined data, The microprocessor 30 transmits this encrypted signal to 
the previously programmed key 24. Then, the sequence proceeds to step 208. 
[0033] In step 208, the microprocessor 30 determines if it has received 
an encrypted valid response signal from the key 24. Specifically, the key 24 
searches the signal, which it received from the ECM 22, for key authentication 
data. If the key 24 searches the signal and determines that the predetermined 
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data within the signal is identical to the key authentication data, then the key 24 
transmits the encrypted valid response signal to the ECM 22 and the sequence 
proceeds to step 210. In other words, when the ECM 22 receives the encrypted 
valid response signal from the key 24, the ECM 22 determines that the 
encryption with the default secret code was successful. Although the valid 
response signal is described as being encrypted, it will be appreciated that the 
response signal may not be encrypted as desired. 

[0034] In step 210, the microprocessor 30 determines that the key 24 is 
an authorized unprogrammed key that requires programming. Only in this 
respect of the invention, it is determined that the key 24 was not previously 
programmed for use with any particular ECM. For that reason, the 
microprocessor 30 executes a normal learning routine and permanently 
overwrites the default secret code in the key 24 with a unique secret code. The 
microprocessor 30 also writes the same unique secret code to its own memory 
28 for subsequent authentication of that key 24. Thereafter, the sequence 
immediately terminates. 

[0035] However, if in step 208, the microprocessor 30 does not receive 
an encrypted valid response signal, then the sequence proceeds to step 212. 
This determination confirms that the key 24 has been previously programmed 
with a unique secret code for use with a specific ECM. In continuation of the 
previous example, the key 24 may determine that the predetermined data within 
the transmitted signal is not identical to the key authentication data stored 
within the key. As a result, the key 24 does not transmit an encrypted valid 
response signal to the microprocessor 30. The absence of the encrypted valid 
response signal indicates to the microprocessor 30 that the encryption was not 
performed successfully. 

[0036] In step 212, the microprocessor 30 utilizes an encryption 
algorithm with a unique secret code for encrypting another signal with 
predetermined data. The microprocessor 30 transmits this encrypted signal to 
the key 24. Then, the sequence proceeds to step 214. 

[0037] In step 214, die microprocessor 30 determines if the 
microprocessor 30 has received an encrypted valid response signal from the key 
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24. Specifically, similar to step 208, the key 24 searches the signal, which it 
received from the ECM 22, for key authentication data. For example, if the key 
24 searches the signal and determines that the predetermined data within the 
signal is identical to the key authentication data, then the key 24 transmits the 
encrypted valid response signal to the microprocessor 30 and the sequence 
proceeds to step 216. When the microprocessor 30 receives the encrypted valid 
response signal from the key 24, the ECM 22 determines that the encryption 
with the default secret code was successful. 

[003B] In step 216, the microprocessor 30 receives an encrypted valid 
response signal from the key 24 and determines that the ECM 22 and the key 24 
both utilize a common unique secret code for encryption. In other words, the 
microprocessor 30 determines that the ECM 22 and the key 24 share private 
data that allows the two components to communicate with each other. For that 
reason, the microprocessor 30 determines that the key 24 is authorized for use 
with the ECM 22 and stores the key ID within the ECM's memory 28. It is 
understood that, in addition to storing the key ID, the microprocessor 30 can 
store a key password that is transmitted from the key 24. 
[0039] However, if in step 214, the ECM 22 does not receive the 
encrypted valid response signal, then the microprocessor determines that the 
key 24 is not currently authorized and that the key 24 was not previously 
programmed for use with the ECM 22. As a result, the sequence immediately 
terminates. 

[0040] Referring now to Figure 4, there is shown a flowchart depicting a 
method for programming a previously programmed key 24 into the ECM 22 
shown in Figure l f according to still another embodiment of the invention. In 
this embodiment, the method includes many of the steps of the previous 
embodiment illustrated in Figure 3, namely steps 200 through 214. In addition, 
this method also includes steps 316 through 322 as described below. It will be 
appreciated that these additional steps create an additional authentication 
procedure that must be satisfied for the key to be re-learned by the ECM 22 in 
this embodiment. This method resumes the previous method at step 214. 
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[0041] If in step 214, the microprocessor 30 determines that the 
encryption with the unique secret code was not successful* then the 
microprocessor 30 also determines that the key 24 is not authorized for use with 
the ECM 22, As a result the sequence immediately terminates. 
[0042] However, if in step 214 the microprocessor 30 determines that 
the encryption with the unique secret code was successful, then the sequence 
proceeds to step 3 16. 

[0043] In step 316, the microprocessor 30 receives an encrypted valid 
response signal from the key 24. This response signal includes a key password, 
Also, it is understood that this response signal may not be encrypted as desired. 
Then, the sequence proceeds to step 318, 

[0044] In step 3 1 8, the microprocessor 30 compares the key password to 
one or more module passwords, which are retrieved from the ECM's memory 
28. The sequence then proceeds to step 320, 

[0045] In step 320, the microprocessor 30 determines whether the key 
password matches the module password. If the passwords are identical, then the 
sequence proceeds to step 322. 

[ 0046] In step 322, the microprocessor 30 determines that the key 24 has 
been authenticated and then stores the key ID to the ECM's memory 28. 
[0047] However, if in step 320 the microprocessor 320 determines that 
the passwords are not identical, then the microprocessor 30 determines that the 
key is not currently authorized and was not previously programmed for use with 
the ECM 22. For that reason, the sequence immediately terminates. 
[ 0048] Referring now to Figure 5, there is shown a flowchart depicting a 
method for re-learning the previously programmed key 24 within ECM 22 
shown in Figure 1, according to yet another embodiment of the invention. The 
sequence begins in step 400 and then immediately proceeds to step 402. 
[0049] In step 402, the ECM 22 receives and reads the key ID. This 
step is accomplished by transmitting a signal, which contains the key ID, from 
the key 24 to the ECM's antenna. 26, Furthermore, the key ID is then 
transmitted from die ECM's antenna 26 to the ECM's microprocessor 30> The 
sequence then proceeds to step 404. 
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[0050] In step 404, the microprocessor 30 retrieves all the active IDs 
from the ECM's memory 28, compares those active IDs to the key ID t and then 
determines that key ID fails to match any of the active key IDs. Thereafter, the 
sequence proceeds to step 406. 

[0051] In step 406, the microprocessor 30 retrieves backup data from 
the supplementary database. This supplementary database is a supplementary 
ECM 32 that is integrated within the vehicle 12. Alternatively, the 
supplemental database is an external database that is selectively coupled to the 
ECM 22. It is contemplated that this backup data can include a key ID, a 
unique secret code, a module password, or any combination thereof. Then, the 
sequence proceeds to step 408. 

[0052] In step 408, the microprocessor 30 utilizes the backup data for 
authenticating the key 24 according to control logic exemplified in the 
descriptions for Figures 2-4. Although Figures 2-4 depict how the key ID is re- 
learned, it should be noted that the ECM 22 can utilize the backup data to re- 
learn the key ID, the key password, or both the key ID and the key password* 
For example, the primary ECM 22 may retrieve only the unique secret code 
from the supplemental ECM 32. In this regard, the primary ECM 22 may 
utilize the unique secret code to authenticate the key 24 and store the key ID 
and/or the key password. It is understood that the key ID and the key password 
are transmitted from the key 24 to the primary ECM 22, 
1 0053 ] While particular embodiments of the invention have been shown 
and described, numerous variations and alternate embodiments will occur to 
those skilled in the art. For example, it is contemplated that any combination of 
authentication protocol can be utilized, e.g. ID restoration, communication 
verification, password authentication, and use of supplemental databases. 
Accordingly, it is intended that the invention be limited only in terms of the 
appended claims. 
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